Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: x/fJWdDYMTPyVmZAIauie21hpGnhmX+IEvS9o0zWV84=
Subject key identifier: 50:46:13:CB:F9:71:01:71:73:9E:97:A6:C3:AC:5C:98:B7:A1:9E:D5
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 0197B7B2F5561C241576C397E4E962943F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 0EDE
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: nwjMl899tBvuQN4mShHbJ31yCLzLYzaVcBGN5sYNo5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f5:56:1c:24:15:76:c3:97:e4:e9:62:94:3f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=504613cbf9710171739e97a6c3ac5c98b7a19ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:ea:7c:f4:9f:a1:fe:10:2b:f1:ea:78:fa:
5a:9e:4e:ff:cc:90:de:f4:7d:4e:ab:98:cb:01:f2:
90:46:91:38:a0:e0:ec:51:aa:b1:8f:34:a0:38:ed:
0f:84:cd:5c:d5:56:6e:e1:27:38:ee:30:70:db:c9:
7d:72:96:a4:6e:1f:5a:a4:c0:39:70:86:67:14:93:
63:14:fd:d1:50:45:4c:16:e6:80:b3:f1:8b:d3:80:
1a:b0:90:e4:0e:20:9b:98:71:ba:7b:31:ad:75:fc:
32:00:01:9a:7f:01:6f:59:31:d5:45:81:01:d4:ea:
2d:ac:96:44:15:a9:a7:6d:d4:65:82:d3:ba:60:08:
90:89:30:4c:60:3c:2c:fb:72:ea:b1:54:21:be:ff:
2d:7e:8b:5a:f9:07:b3:95:11:5a:e9:4a:26:29:15:
1c:3d:2c:c8:a1:f3:21:d6:65:0c:f6:98:15:c4:71:
85:21:6b:2a:45:be:0c:a0:42:4c:32:df:cd:f0:92:
fd:15:14:b8:ef:cb:e8:da:ed:72:33:21:54:47:6c:
31:06:70:4d:db:13:68:90:fa:a5:df:f1:82:b3:34:
e0:0b:10:bc:48:bd:de:46:be:db:ad:80:e7:6a:c1:
27:b4:58:66:a9:9d:ba:a8:4d:86:c8:3e:b9:cd:10:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:13:CB:F9:71:01:71:73:9E:97:A6:C3:AC:5C:98:B7:A1:9E:D5
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:ad:c1:74:50:73:d2:5d:50:ae:ad:c8:25:67:c6:2f:92:
97:f8:22:c2:92:a4:c8:c0:43:d6:20:e9:95:f8:41:5b:ee:0b:
84:43:f6:b8:d4:c1:c8:b2:05:ba:67:bf:7c:a1:00:8f:e3:2e:
89:6d:cf:39:e0:0c:2c:e3:c4:82:60:90:51:c6:f3:58:a1:50:
b1:3f:69:26:04:b5:0d:18:8b:85:9c:51:7b:8d:a1:7d:b7:bc:
0d:6d:01:71:14:15:48:08:87:e9:5a:69:1a:fe:ad:b6:f9:ae:
67:b6:5d:c6:a1:44:9c:bd:3f:34:ea:d6:bd:a7:e4:e7:44:3e:
e0:cb:26:e1:7e:b3:17:79:a3:b4:fa:76:d2:6c:f3:e2:d1:cb:
04:60:56:18:0c:7b:19:16:51:4b:74:8d:88:0b:a1:80:24:92:
ea:14:c3:81:95:0e:11:66:c0:81:38:4d:e6:61:d0:ed:d2:01:
d4:82:2a:f5:b7:a7:2f:0b:f4:7a:02:d6:e2:63:f6:ea:e3:f8:
76:f4:f0:11:4f:38:db:39:ce:af:01:62:85:75:2a:da:e2:1e:
16:ad:7b:ec:07:65:e7:76:01:d8:2f:10:48:af:aa:b5:95:9f:
7d:00:01:44:25:d3:ac:d0:08:14:ad:62:9f:38:97:5c:1c:1d:
e4:ad:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:34 2025 by rpki-client